AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User wavellan joined AbuseIPDB in February 2018 and has reported 2,119 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇺🇸 128.245.187.13	23 Feb 2026	https://pastebin.com/0tPbQ8gj	Email Spam Phishing
🇫🇷 213.32.149.207	23 Feb 2026	Authentication-Results: spf=pass (sender IP is 213.32.149.207) smtp.mailfrom=softwaresuggest-email ... show more Authentication-Results: spf=pass (sender IP is 213.32.149.207) smtp.mailfrom=softwaresuggest-email.com; dkim=pass (signature was verified) header.d=softwaresuggest.com;dmarc=pass action=none header.from=softwaresuggest.com;compauth=pass reason=100 show less	Email Spam Phishing
🇹🇷 185.87.26.194	23 Feb 2026		Email Spam Phishing
🇺🇸 128.245.72.148	23 Feb 2026	Prolific SPAMMER on Bird.com, Inc. / SparkPost Elite network. Abuse reports are never acknowledged. ... show more Prolific SPAMMER on Bird.com, Inc. / SparkPost Elite network. Abuse reports are never acknowledged. Domain name and IP simply change after abuse report. Sender uses SalesForce, SendGrid, Bird.com, Spark Post Elite, and other services to send UCE. Reference dates, domains, and IP's below. Add IP and domains to your RBL. #BirdDotComFinancialSPAM 20260206 - safeinvestzone.com 20260126 - yourprofitspring.com 20240124 - mastersofthestockmarket.com 20240124 - markets-navigator.com 20260210 - smartsocietyinvestors.com 20260211 - smartsocietyinvestors.com 20260217 - globalpulsewire.com - 129.77.16.120 20260217 - thecapitalbuilder.com - 128.245.186.206 20260217 - americaninveststrategy.com - 128.245.71.93 20260217 - theresponsibleinvesting.com - 128.245.70.220 20260218 - theresponsibleinvesting.com - 128.245.70.245 20260218 - theresponsibleinvesting.com - 128.245.70.246 20260218 - theresponsibleinvesting.com - 128.245.70.247 20260219 - profitnewsreport.com - 128.245.187.14 show less	Email Spam Phishing
🇺🇸 128.245.70.247	19 Feb 2026	Prolific SPAMMER on Bird.com, Inc. / SparkPost Elite network. Abuse reports are never acknowledged. ... show more Prolific SPAMMER on Bird.com, Inc. / SparkPost Elite network. Abuse reports are never acknowledged. Domain name and IP simply change after abuse report. Sender uses SalesForce, SendGrid, Bird.com, Spark Post Elite, and other services to send UCE. Reference dates, domains, and IP's below. Add IP and domains to your RBL. #BirdDotComFinancialSPAM 20260206 - safeinvestzone.com 20260126 - yourprofitspring.com 20240124 - mastersofthestockmarket.com 20240124 - markets-navigator.com 20260210 - smartsocietyinvestors.com 20260211 - smartsocietyinvestors.com 20260217 - globalpulsewire.com - 129.77.16.120 20260217 - thecapitalbuilder.com - 128.245.186.206 20260217 - americaninveststrategy.com - 128.245.71.93 20260217 - theresponsibleinvesting.com - 128.245.70.220 20260218 - theresponsibleinvesting.com - 128.245.70.245 20260218 - theresponsibleinvesting.com - 128.245.70.246 20260218 - theresponsibleinvesting.com - 128.245.70.247 20260219 - profitnewsreport.com - 128.245.187.14 show less	Email Spam Phishing
🇺🇸 128.245.187.14	19 Feb 2026	Prolific SPAMMER on Bird.com, Inc. / SparkPost Elite network. Abuse reports are never acknowledged. ... show more Prolific SPAMMER on Bird.com, Inc. / SparkPost Elite network. Abuse reports are never acknowledged. Domain name and IP simply change after abuse report. Sender uses SalesForce, SendGrid, Bird.com, Spark Post Elite, and other services to send UCE. Reference dates, domains, and IP's below. Add IP and domains to your RBL. #BirdDotComFinancialSPAM 20260206 - safeinvestzone.com 20260126 - yourprofitspring.com 20240124 - mastersofthestockmarket.com 20240124 - markets-navigator.com 20260210 - smartsocietyinvestors.com 20260211 - smartsocietyinvestors.com 20260217 - globalpulsewire.com - 129.77.16.120 20260217 - thecapitalbuilder.com - 128.245.186.206 20260217 - americaninveststrategy.com - 128.245.71.93 20260217 - theresponsibleinvesting.com - 128.245.70.220 20260218 - theresponsibleinvesting.com - 128.245.70.245 20260218 - theresponsibleinvesting.com - 128.245.70.246 20260219 - profitnewsreport.com - 128.245.187.14 show less	Email Spam Phishing
🇺🇸 128.245.70.246	18 Feb 2026	Prolific SPAMMER on Bird.com, Inc. / SparkPost Elite network. Abuse reports are never acknowledged. ... show more Prolific SPAMMER on Bird.com, Inc. / SparkPost Elite network. Abuse reports are never acknowledged. Domain name and IP simply change after abuse report. Sender uses SalesForce, SendGrid, Bird.com, Spark Post Elite, and other services to send UCE. Reference dates, domains, and IP's below. Add IP and domains to your RBL. #BirdDotComFinancialSPAM 20260206 - safeinvestzone.com 20260126 - yourprofitspring.com 20240124 - mastersofthestockmarket.com 20240124 - markets-navigator.com 20260210 - smartsocietyinvestors.com 20260211 - smartsocietyinvestors.com 20260217 - globalpulsewire.com - 129.77.16.120 20260217 - thecapitalbuilder.com - 128.245.186.206 20260217 - americaninveststrategy.com - 128.245.71.93 20260217 - theresponsibleinvesting.com - 128.245.70.220 20260218 - theresponsibleinvesting.com - 128.245.70.245 20260218 - theresponsibleinvesting.com - 128.245.70.246 show less	Email Spam Phishing
🇩🇪 51.89.97.39	18 Feb 2026	Phishing URL spread via malware SPAM - https://www.virustotal.com/gui/url/9991b3f0a9867eb0467535e87f ... show more Phishing URL spread via malware SPAM - https://www.virustotal.com/gui/url/9991b3f0a9867eb0467535e87f284276e1807a6c7663a6292765123177d8c020 show less	Email Spam Phishing
🇪🇸 217.154.183.226	18 Feb 2026	IP used to send phishing e-mail - https://www.virustotal.com/gui/url/9991b3f0a9867eb0467535e87f28427 ... show more IP used to send phishing e-mail - https://www.virustotal.com/gui/url/9991b3f0a9867eb0467535e87f284276e1807a6c7663a6292765123177d8c020 show less	Email Spam Phishing
🇺🇸 128.245.70.245	18 Feb 2026	Prolific SPAMMER on Bird.com, Inc. / SparkPost Elite network. Abuse reports are never acknowledged. ... show more Prolific SPAMMER on Bird.com, Inc. / SparkPost Elite network. Abuse reports are never acknowledged. Domain name and IP simply change after abuse report. Sender uses SalesForce, SendGrid, Bird.com, Spark Post Elite, and other services to send UCE. Reference dates, domains, and IP's below. Add IP and domains to your RBL. #BirdDotComFinancialSPAM 20260206 - safeinvestzone.com 20260126 - yourprofitspring.com 20240124 - mastersofthestockmarket.com 20240124 - markets-navigator.com 20260210 - smartsocietyinvestors.com 20260211 - smartsocietyinvestors.com 20260217 - globalpulsewire.com - 129.77.16.120 20260217 - thecapitalbuilder.com - 128.245.186.206 20260217 - americaninveststrategy.com - 128.245.71.93 20260217 - theresponsibleinvesting.com - 128.245.70.220 20260218 - theresponsibleinvesting.com - 128.245.70.245 show less	Email Spam Phishing
🇺🇸 128.245.71.93	17 Feb 2026	Prolific SPAMMER on Bird.com, Inc. / SparkPost Elite network. Abuse reports are never acknowledged. ... show more Prolific SPAMMER on Bird.com, Inc. / SparkPost Elite network. Abuse reports are never acknowledged. Domain name and IP simply change after abuse report. Sender uses SalesForce, SendGrid, Bird.com, Spark Post Elite, and other services to send UCE. Reference dates, domains, and IP's below. Add IP and domains to your RBL. #BirdDotComFinancialSPAM 20260206 - safeinvestzone.com 20260126 - yourprofitspring.com 20240124 - mastersofthestockmarket.com 20240124 - markets-navigator.com 20260210 - smartsocietyinvestors.com 20260211 - smartsocietyinvestors.com 20260217 - globalpulsewire.com - 129.77.16.120 20260217 - thecapitalbuilder.com - 128.245.186.206 20260217 - americaninveststrategy.com - 128.245.71.93 show less	Email Spam Phishing
🇺🇸 128.245.186.206	17 Feb 2026	Prolific SPAMMER on Bird.com, Inc. / SparkPost Elite network. Abuse reports are never acknowledged. ... show more Prolific SPAMMER on Bird.com, Inc. / SparkPost Elite network. Abuse reports are never acknowledged. Domain name and IP simply change after abuse report. Sender uses SalesForce, SendGrid, Bird.com, Spark Post Elite, and other services to send UCE. Reference dates, domains, and IP's below. Add IP and domains to your RBL. #BirdDotComFinancialSPAM 20260206 - safeinvestzone.com 20260126 - yourprofitspring.com 20240124 - mastersofthestockmarket.com 20240124 - markets-navigator.com 20260210 - smartsocietyinvestors.com 20260211 - smartsocietyinvestors.com 20260217 - globalpulsewire.com 20260217 - thecapitalbuilder.com show less	Email Spam Phishing
🇺🇸 129.77.16.120	17 Feb 2026	Prolific SPAMMER on Bird.com, Inc. / SparkPost Elite network. Abuse reports are never acknowledged. ... show more Prolific SPAMMER on Bird.com, Inc. / SparkPost Elite network. Abuse reports are never acknowledged. Domain name and IP simply change after abuse report. Sender uses SalesForce, SendGrid, Bird.com, Spark Post Elite, and other services to send UCE. Reference dates, domains, and IP's below. Add IP and domains to your RBL. #BirdDotComFinancialSPAM 20260206 - safeinvestzone.com 20260126 - yourprofitspring.com 20240124 - mastersofthestockmarket.com 20240124 - markets-navigator.com 20260210 - smartsocietyinvestors.com 20260211 - smartsocietyinvestors.com 20260217 - globalpulsewire.com show less	Email Spam Phishing
🇺🇸 147.253.215.37	15 Feb 2026	Prolific SPAMMER on Bird.com, Inc. / SparkPost Elite network. Abuse reports are never acknowledged. ... show more Prolific SPAMMER on Bird.com, Inc. / SparkPost Elite network. Abuse reports are never acknowledged. Domain name and IP simply change after abuse report. Sender users SalesForce, SendGrid, Bird.com, Spark Post Elite, and other services to send UCE. Reference dates, domains, and IP's below. Add IP and domains to your RBL. #BirdDotComFinancialSPAM 20260209 - bigmarketwatchers.com 20260203 - discoverownliberty.com 20260126 - discoverownliberty.com 20260116 - permanentvictory.com 20260116 - prosperityforecast.com 20260214 - futuremoneyorbit.com 20260214 - globalmarketsreview.com 20260215 - globalmarketsreview.com - 147.253.215.37 show less	Phishing Email Spam
🇺🇸 156.70.24.255	15 Feb 2026	Add to your RBL. IP used by prolific spammer on the Bird.com, Inc. network. When Bird.com receives ... show more Add to your RBL. IP used by prolific spammer on the Bird.com, Inc. network. When Bird.com receives an abuse report, the spammer changes IP and domain name. Previously reported domains here: 20260209 -bigmarketwatchers.com 20260203 - discoverownliberty.com 20260126 - discoverownliberty.com 20260116 - permanentvictory.com 20260116 - prosperityforecast.com 20260214 - futuremoneyorbit.com 20260214 - globalmarketsreview.com show less	Phishing Email Spam
🇺🇸 199.15.225.251	14 Feb 2026	IP used by prolific SPAMMER. Add to your RBL. When SPAM activities reported to Bird.com, Inc., the ... show more IP used by prolific SPAMMER. Add to your RBL. When SPAM activities reported to Bird.com, Inc., they and their SPAMMER customer simply change the domain name. 20260209 -bigmarketwatchers.com 20260203 - discoverownliberty.com 20260126 - discoverownliberty.com 20260116 - permanentvictory.com 20260116 - prosperityforecast.com 20260214 - futuremoneyorbit.com 20260214 - globalmarketsreview.com show less	Phishing Email Spam
🇺🇸 168.203.33.89	14 Feb 2026	Add IP to RBL. IP used by prolific SPAMMER of financial gobbledygook. Whenver the IP is reported, ... show more Add IP to RBL. IP used by prolific SPAMMER of financial gobbledygook. Whenver the IP is reported, Bird.com, Inc. and it's co-conspirator simply changes the domain name. 20260209 - bigmarketwatchers.com 20260203 - discoverownliberty.com 20260126 - discoverownliberty.com 20260116 - permanentvictory.com 20260116 - prosperityforecast.com 20260214 - futuremoneyorbit.com show less	Phishing Email Spam
🇺🇸 128.245.252.211	12 Feb 2026	IP still being used by prolific spammer. Uses SparkPost, SalesForce, and SendGrid services to distr ... show more IP still being used by prolific spammer. Uses SparkPost, SalesForce, and SendGrid services to distribute SPAM. When reported, changes domain. show less	Phishing Email Spam
🇺🇸 159.183.101.195	12 Feb 2026	IP used by prolific spammer using domain metalsvaulted.com. Spammer uses SendGrid, SparkPost, and S ... show more IP used by prolific spammer using domain metalsvaulted.com. Spammer uses SendGrid, SparkPost, and SalesForce to send SPAM. When reported, simply changes domain name. show less	Phishing Email Spam
🇺🇸 128.245.252.211	11 Feb 2026	IP used to send SPAM. SalesForce pretends to address issue, but their customer simply changes the d ... show more IP used to send SPAM. SalesForce pretends to address issue, but their customer simply changes the domain name. 20260206 - safeinvestzone.com 20260126 - yourprofitspring.com 20240124 - mastersofthestockmarket.com 20240124 - markets-navigator.com 20260210 - smartsocietyinvestors.com 20260211 - smartsocietyinvestors.com show less	Email Spam
🇺🇸 161.38.200.181	19 Jan 2026	Sending SPAM despite repeated abuse reports. Add to your RBL.	Email Spam
🇺🇸 91.233.1.18	15 Jan 2026	Customer using IP to run pig butchering SCAM by filling out forms. Pretending to be Amanda Monteneg ... show more Customer using IP to run pig butchering SCAM by filling out forms. Pretending to be Amanda Montenegro. My name is Mrs. Amanda Montenegro, and I’m reaching out regarding a flooring project that needs to be completed promptly. My family and I are relocating from IL, and I’ve recently secured a home. Please feel free to get back to me at [email protected] at your earliest convenience. Thank you, Amanda Montenegro show less	Phishing Web Spam
🇨🇱 204.199.139.130	03 Jan 2026	Sending American Express phishing links - CRITICAL ALERT:: Full Account Lockout Scheduled for Januar ... show more Sending American Express phishing links - CRITICAL ALERT:: Full Account Lockout Scheduled for January 4, 2026 - Sending https://www.virustotal.com/gui/url/121cfb4de6ba0e9057280b647ce89707ba309526f68af778bf2ed25a5de7c352 show less	Phishing Email Spam
🇧🇷 131.100.204.169	21 Nov 2025	Host STILL used to send DocuSign phishing e-mails - Suspicious Activity on Your Capital One Card – A ... show more Host STILL used to send DocuSign phishing e-mails - Suspicious Activity on Your Capital One Card – Act Now! - Now sending = https://www.virustotal.com/gui/url/65b42ddf3f00d19da54617375627c2b1f0c2033023a72b86b02e5b843b7448d2 show less	Phishing Email Spam
🇺🇸 135.18.210.185	21 Nov 2025	Used to host malware links - https://www.virustotal.com/gui/url/6bd67497d373023a65d231a3a68f47acfa24 ... show more Used to host malware links - https://www.virustotal.com/gui/url/6bd67497d373023a65d231a3a68f47acfa24ae19c566adde67770d2e3991ee05 show less	Phishing Email Spam Exploited Host